$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer File: AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.cer (raw, json) Hash identifier: GVdesRVQtZySig/U6m9kh+5j5bXWGJkUeNnzMPVFyr0= Subject key identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 3E7F503815A659256527DF1641BE15D7A4B1DE91 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft caRepository: rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Wed 23 Oct 2024 08:26:14 +0000 Certificate not after: Wed 22 Oct 2025 08:31:14 +0000 Subordinate resources: AS: 266003 IP: 45.173.64.0/22 IP: 181.191.96.0/22 IP: 2804:4118::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 23 Nov 2024 19:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7f:50:38:15:a6:59:25:65:27:df:16:41:be:15:d7:a4:b1:de:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Oct 23 08:26:14 2024 GMT Not After : Oct 22 08:31:14 2025 GMT Subject: CN=AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:20:ff:51:cf:a9:e2:c9:75:24:10:3f:f3: 0b:a1:5c:30:80:11:03:88:fb:03:3d:4e:a7:c3:30: 97:84:b1:40:3d:67:b4:09:c6:78:a9:f7:75:d8:39: b9:02:2c:26:fe:9f:98:ba:db:dc:a1:28:10:b6:90: 9a:ad:b8:e7:2a:09:01:f9:3d:f1:85:d5:25:34:33: 8c:6b:87:c9:22:4a:dc:71:70:d2:54:f4:c6:f9:84: 01:5e:d1:82:e0:05:ce:59:9d:17:ed:0f:2d:ac:e9: c0:ca:71:58:dc:9c:9a:81:a3:5a:ce:55:47:df:6d: 6a:39:d1:6d:dd:13:2f:9c:13:76:be:83:5d:53:51: 37:15:31:a6:fa:ee:26:cb:43:8e:84:5b:08:cc:b7: bc:e1:5b:b2:21:54:f7:36:f8:2e:bd:8d:ce:d1:71: 10:56:b1:56:5f:25:49:d4:9e:6a:27:c1:7c:61:ec: 61:6c:70:e0:fb:ee:3c:90:9b:52:ed:06:8c:96:bb: 43:c2:c5:e4:5b:23:2d:e9:71:46:cb:f8:4b:28:cc: f4:1e:c7:52:f4:ca:27:8f:7e:2c:94:0e:fb:36:c3: eb:33:25:80:25:4f:a3:90:e0:4c:62:81:d0:66:f3: 90:fa:3b:8d:00:56:62:ca:89:4e:dd:62:5b:a2:72: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:07:8E:8F:5E:A4:EF:EF:8E:70:03:E0:A9:B2:11:65:B5:AB:81:D4 X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/ RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D1duEuF8eLBtiWqeB6zFnvGjJs7NvtBnu37borKVzjdH/0/AA078E8F5EA4EFEF8E7003E0A9B21165B5AB81D4.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.64.0/22 181.191.96.0/22 IPv6: 2804:4118::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266003 Signature Algorithm: sha256WithRSAEncryption dc:83:42:6c:e1:ea:ff:99:93:b2:43:3f:7d:ba:28:05:8d:da: 09:c0:c2:0a:92:c0:60:55:7d:b7:fd:60:9d:fa:cb:8e:05:0f: fd:4e:4d:b5:b7:0f:13:9e:2b:35:91:17:b0:c4:cd:f3:d9:5f: f7:3b:7b:58:2c:b8:ce:84:04:db:0b:78:fc:4a:97:e7:31:aa: f4:bb:77:80:40:9a:ae:92:91:3c:31:b2:59:0b:9c:52:57:14: f1:e9:f7:4d:8d:ca:9f:8d:df:9a:e0:84:0d:55:a7:05:47:d8: f3:42:b7:49:5f:76:22:89:8a:e8:79:cf:cd:87:d9:e6:fd:08: 58:7e:2c:35:b4:b8:81:da:ff:3f:3d:4e:c0:d2:7e:42:b4:73: a1:70:5d:bb:3d:28:1f:8b:68:c1:61:27:3e:4a:3a:7f:45:fc: dc:64:bc:84:91:e7:8a:3c:f4:7a:9e:c4:4f:55:c7:47:30:22: e2:9a:f9:c8:9e:48:6e:df:98:dc:d7:c6:3c:54:75:98:f0:c5: e8:6e:13:45:d1:8d:a7:d4:e4:5b:9e:27:8b:5b:ea:09:c3:30: 5e:60:dc:47:3d:a2:7f:05:5d:9a:e8:fd:4a:c2:30:6f:cf:74: 7b:e7:5f:b5:05:8a:8f:54:64:7e:d5:19:cb:e3:6c:eb:46:60: 33:da:97:d7 -----BEGIN CERTIFICATE----- MIIGNjCCBR6gAwIBAgIUPn9QOBWmWSVlJ98WQb4V16Sx3pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNDEwMjMwODI2MTRaFw0yNTEwMjIwODMxMTRaMDMxMTAvBgNV BAMTKEFBMDc4RThGNUVBNEVGRUY4RTcwMDNFMEE5QjIxMTY1QjVBQjgxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIiD/Uc+p4sl1JBA/8wuhXDCA EQOI+wM9TqfDMJeEsUA9Z7QJxnip93XYObkCLCb+n5i629yhKBC2kJqtuOcqCQH5 PfGF1SU0M4xrh8kiStxxcNJU9Mb5hAFe0YLgBc5ZnRftDy2s6cDKcVjcnJqBo1rO VUffbWo50W3dEy+cE3a+g11TUTcVMab67ibLQ46EWwjMt7zhW7IhVPc2+C69jc7R cRBWsVZfJUnUnmonwXxh7GFscOD77jyQm1LtBoyWu0PCxeRbIy3pcUbL+EsozPQe x1L0yiePfiyUDvs2w+szJYAlT6OQ4ExigdBm85D6O40AVmLKiU7dYluicqbrAgMB AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSqB46PXqTv745w A+CpshFltauB1DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRDFk dUV1RjhlTEJ0aVdxZUI2ekZudkdqSnM3TnZ0Qm51Mzdib3JLVnpqZEgvMC8wgYoG CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Qx ZHVFdUY4ZUxCdGlXcWVCNnpGbnZHakpzN052dEJudTM3Ym9yS1Z6amRILzAvQUEw NzhFOEY1RUE0RUZFRjhFNzAwM0UwQTlCMjExNjVCNUFCODFENC5tZnQwPwYIKwYB BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH AQH/BCUwIzASBAIAATAMAwQCLa1AAwQCtb9gMA0EAgACMAcDBQAoBEEYMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQPEzANBgkqhkiG9w0BAQsFAAOCAQEA3INCbOHq /5mTskM/fbooBY3aCcDCCpLAYFV9t/1gnfrLjgUP/U5NtbcPE54rNZEXsMTN89lf 9zt7WCy4zoQE2wt4/EqX5zGq9Lt3gECarpKRPDGyWQucUlcU8en3TY3Kn43fmuCE DVWnBUfY80K3SV92IomK6HnPzYfZ5v0IWH4sNbS4gdr/Pz1OwNJ+QrRzoXBduz0o H4towWEnPko6f0X83GS8hJHnijz0ep7ET1XHRzAi4pr5yJ5Ibt+Y3NfGPFR1mPDF 6G4TRdGNp9TkW54ni1vqCcMwXmDcRz2ifwVdmuj9SsIwb890e+dftQWKj1RkftUZ y+Ns60ZgM9qX1w== -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:20 2024 by rpki-client on console-ams.rpki-client.org